Cluster25 (via Open-Source-YARA-rules)
- Repository
- https://github.com/mikesxrs/Open-Source-YARA-rules
- Commit
- ec0056f767db98bf6d5fd63877ad51fb54d350e9
- Abgerufen
- 2026-09-27
- Lizenz
- No licence (all rights reserved)
- Veröffentlicht
- Metadaten
- Begründung
- Unlicensed mirror repository and no licence in the rules: metadata and upstream link only.
Regeln von Cluster25 (via Open-Source-YARA-rules)
- CLUSTER25_APT28_Skinnyboy_LauncherNur Metadaten
No description has been set in the source file - Cluster25
MalwareCluster25 (via Open-Source-YARA-rules)· Cluster25· 2023-04-10 - CLUSTER25_Ghostwriter_Microbackdoor_72632_00001Nur Metadaten
No description has been set in the source file - Cluster25
MalwareCluster25 (via Open-Source-YARA-rules)· Cluster25· 2023-04-10 - CLUSTER25_UNC1222_Hermeticwiper_23433_10001Nur Metadaten
Detects HermeticWiper variants by internal strings
MalwareCluster25 (via Open-Source-YARA-rules)· Cluster25· 2022-02-23 - CLUSTER25_APT28_Skinnyboy_ImplanterNur Metadaten
No description has been set in the source file - Cluster25
MalwareCluster25 (via Open-Source-YARA-rules)· Cluster25· 2021-05-24 - CLUSTER25_Sidewinder_Apt_Rtf_Cve_2017_0199Nur Metadaten
No description has been set in the source file - Cluster25
APT / AkteurCluster25 (via Open-Source-YARA-rules)· Cluster25· 2021-09-09 - CLUSTER25_Ghostwriter_Microloader_72632_00001Nur Metadaten
No description has been set in the source file - Cluster25
GenerischCluster25 (via Open-Source-YARA-rules)· Cluster25· 2023-04-10 - CLUSTER25_APT29_Loader_87221_00001Nur Metadaten
Detects DLL loader variants used in Nobelium kill-chain
MalwareCluster25 (via Open-Source-YARA-rules)· Cluster25· 2023-04-10 - CLUSTER25_APT29_Htmlsmuggling_ZIP_82733_00001Nur Metadaten
Rule to detect the EnvyScout HTML smuggling with ZIP payload used in the APT29/Nobelium APT29 chain
APT / AkteurCluster25 (via Open-Source-YARA-rules)· Cluster25· 2022-05-12